Malicious npm packages evade install-script defenses at runtime

2026-09-21T01:23:22Z•7784d6272ebbd8e2fdb472bd30e53d9553edcca94b68599739b76efcd5d6d30d
AI-securityAndroid-malwareCheck-PointMicrosoftNorth-Koreabrowser-extensioncritical-vulnerabilitycryptocurrency-theftdata-breachenterprise-securityinfostealermalwarenpm-supply-chainprompt-injectionransomwareremote-code-executionroot-privilegessandbox-escapevulnerability

What happened

A BleepingComputer security-news feed covering active malware campaigns, software vulnerabilities, data breaches, supply-chain attacks, AI-agent sandbox escapes, browser-agent hijacking, and threat-actor activity. The most severe items include a critical Check Point management-system flaw enabling root-level code execution, an ongoing malicious npm campaign, a large-scale North Korean device-infection campaign, and a Gyazo breach affecting 23.6 million records.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
bleepingcomputer
Record identifier
7784d6272ebbd8e2fdb472bd30e53d9553edcca94b68599739b76efcd5d6d30d
Enrichment time
2026-09-21T01:23:22Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.